Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: NcxBA5R7a1XLB4zz7mrqWRliKKOSTXjtXzD9Ka15bHU=
Subject key identifier: D4:D2:AF:B8:11:CE:02:99:4B:9D:B9:54:71:EA:97:0F:0E:49:D6:90
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 01976471CC599719A5E306F73DD7C9BE5339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 14:01:08 +0000
Manifest this update: Thu 12 Jun 2025 14:01:08 +0000
Manifest next update: Fri 13 Jun 2025 14:01:08 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: TcjLZSHq8dCQAxQDqfegMpBAkY4D1QUltILgYlr+uD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:cc:59:97:19:a5:e3:06:f7:3d:d7:c9:be:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Jun 12 14:01:08 2025 GMT
Not After : Jun 13 14:01:08 2025 GMT
Subject: CN=d4d2afb811ce02994b9db95471ea970f0e49d690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:00:7a:7d:8e:15:be:fc:6c:d1:86:33:90:
b0:0e:0a:d3:09:ab:f3:00:be:de:b3:77:af:06:9b:
00:a3:d0:55:3c:17:c5:bf:2e:88:a1:d7:a0:73:23:
cd:00:55:ee:01:1e:19:2e:f8:3f:1c:06:21:2f:06:
c7:45:b7:16:60:be:27:93:0d:86:c1:ff:9c:56:c4:
9e:b3:11:b7:38:62:52:e8:cd:a0:86:fa:ac:b9:e5:
f2:61:51:0a:ca:61:73:e3:da:8c:ce:a3:b9:3d:64:
d6:25:db:c0:68:91:74:1a:0c:62:d7:87:f0:08:bc:
0d:e5:73:f1:8b:61:25:a1:fb:9d:1e:d4:ac:8f:2e:
ba:df:96:99:be:a8:95:67:66:d7:4a:5b:9e:e6:1a:
ff:36:0b:b3:b5:59:46:40:31:f6:43:c4:0d:de:68:
44:68:55:f2:f8:c2:74:46:5e:2a:c8:90:07:ab:25:
2e:2c:cf:9e:a8:f5:0f:6c:e4:94:3e:44:03:48:8c:
66:db:2c:8b:d3:0e:cb:20:8b:9f:38:fa:1b:79:35:
5b:5f:5e:65:99:58:de:f0:6e:ff:a1:bc:fc:d3:0d:
dc:eb:de:62:ed:c1:7e:21:87:f5:02:03:6b:67:89:
b8:5f:d5:ef:dd:6a:8d:84:ee:1d:f6:a2:bf:89:3f:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:AF:B8:11:CE:02:99:4B:9D:B9:54:71:EA:97:0F:0E:49:D6:90
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:dd:77:78:a4:58:6d:60:78:0b:92:44:e9:f7:10:2c:52:
22:41:17:29:9a:8d:09:d9:eb:2b:3f:6f:52:b0:0a:e8:ad:50:
58:2a:a7:fc:c4:56:56:6c:4c:72:3c:3a:ab:28:94:7c:99:a5:
83:e7:dc:93:98:12:59:62:c2:31:71:45:6f:f5:57:06:ce:4d:
73:ea:22:58:a3:a3:50:f8:8b:e7:01:fe:2b:a0:a1:c9:31:ec:
3c:b6:4b:26:a7:30:df:04:9f:14:b3:4e:07:6d:d1:91:77:a7:
36:a3:0d:61:ae:88:3b:bb:3a:87:c1:1c:8c:93:17:3c:21:7b:
0b:ca:8d:8c:1d:16:ce:9f:00:26:53:ba:45:4c:de:5d:0c:49:
bc:15:fd:4e:ed:d4:c9:28:47:55:5f:ca:ac:32:4a:8c:58:a8:
cd:c7:28:03:7a:90:4d:b5:48:92:4a:99:29:b6:6a:9f:f9:c7:
cb:98:8f:71:cb:32:8b:d6:ec:bb:74:ca:de:21:8d:d4:7b:c6:
12:56:b3:5d:f5:be:c7:1c:1e:c9:ce:f4:84:69:75:f1:2c:1d:
a8:a8:b7:ec:d7:cb:3c:ce:51:0c:d1:f6:b4:31:19:2d:1e:80:
4d:eb:f2:3e:0a:7c:33:a4:d7:17:e2:03:0e:45:27:20:b4:0c:
ce:ee:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:46:14 2025 by rpki-client